CVE-2025-5548

🧪 FreeFloat FTP Server Buffer Overflow Lab CVE-2025-5548 📌 Description This lab demonstrates how to exploit a Stack Buffer Overflow vulnerability in FreeFloat FTP Server , identified as CVE-2025-5548. The objective is to understand the complete exploitation process on vulnerable Windows...

Script-For-CVE-2024-20666

Script-For-CVE-2024-20666 Automate updating the WinRE partition without having to resize it first and patch the CVE-2024-20666 BitLocker vulnerability. Microsoft Link Script found here Works for Windows Server 2022 Server Core installation KB5034439: Windows Recovery Environment update for Azure...

CVE-2021-1732

CVE-2021-1732 CVE-­2021­-1732 Microsoft Windows 10 local privilege escalation vulnerability research and PoC/Exploit development Affected systems and application versions Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64­based Systems Windows 10 Version 20H2...

CVE-2025-5548

CVE-2025-5548 Repository documenting the vulnerability CVE-2025-5548 , including environment setup and step-by-step exploitation. Structure 1. Installation — Required tools Python, IDA, Immunity, Mona, Free Float FTP Server, Ncat. 2. Exploitation — IDA analysis and step-by-step overflow exploit;...

CVE-2025-55182-NextJS-Scanner-React2Shell-PoC

CVE-2025-55182 Exploitation Tool A comprehensive security research tool for testing Next.js React Server Components Remote Code Execution vulnerability CVE-2025-55182. Overview This toolkit provides automated detection and exploitation capabilities for CVE-2025-55182, a critical RCE vulnerability...

react-CVE-2025-55182-fixer

React Server Components Security PR Automation This repository provides a script to automatically bump and create pull requests PRs for repositories affected byCVE-2025-55182, which affects vulnerable versions of react-server-dom- and related React packages. What does this tool do? Scans for...

CVE-2026-83548-SonicWall-SMA1000-Analysis

CVE-2026-83548 — SonicWall SMA1000 Vulnerability Analysis A cybersecurity project exploring a real-world vulnerability,its potential impact,and how security teams can detect,fix,and verify the issue. Project Overview This project is part of my cybersecurity learning journey. I selected...

CVE-2021-41773-exercise

CVE-2021-41773-exercise A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by...

CVE-2026-11106-DNS-Zone-Transfer-AXFR-Information-Disclosure

CVE-2026-11106 – DNS Zone Transfer AXFR Information Disclosure Program Code Python DNS Server + Attack dnsserversim.py - Simulated DNS server allowing AXFR from dnslib import DNSRecord, QTYPE, RR, TXT, A import socketserver, socket class DNSHandlersocketserver.BaseRequestHandler: def handleself:...

cve-2025-55182

CVE-2025-55182 Python Exploit Python 3 script that can be used to demonstrate CVE-2025-55182. It exploits a server-side JavaScript injection vulnerability in Next.js/React applications, allowing remote code execution via malformed multipart form data. ⚠️ For educational and authorized testing...

detectXSSlib

detectXSSlib Project folders: detectxsslib - main library see ReadMe.txt for more information modules - server modules using detectxsslib test - sets of URLs used for verification of the library tools - command line tools using detectxsslib See license.txt for licensing details...

CVE-2025-32433

CVE-2025-32433 A critical vulnerability in Erlang/OTP SSH server allows unauthenticated remote code execution RCE. The flaw exists in the SSH protocol message handling mechanism, enabling attackers to execute arbitrary commands without requiring authentication credentials. Impact Critical severit...

garble

garble go install mvdan.cc/garble@latest or @master Obfuscate Go code by wrapping the Go toolchain. Requires Go 1.27 or later. garble build build flags packages The tool also supports garble test to run tests with obfuscated code, garble run to obfuscate and execute simple programs, garble revers...

gdb-frontend

GDBFrontend is an easy, flexible and extensionable gui debugger. Installing Requirements GDB = 8.2 with python3 python3 = 3.6 tmux PIP Package Python Wheel Recommended You can install GDBFrontend with pip. sudo python3 -m pip install gdbfrontend if it is already installed and you are upgrading su...

security checks

🔍 Miner Hunter Crypto-miner detection, removal, and hardening toolkit for Linux servers. Built from real-world incident response — detects miners that hide from ps, top, htop, and btop using rootkit techniques. 📦 Installation git clone https://gitlab.com/abdom.seada/security-checks.git cd...

rust-cve-2025-55182-scanner

CVE-2025-55182 Scanner Rust A high-performance, concurrent vulnerability scanner written in Rust for detecting CVE-2025-55182 Next.js Server Actions RCE across multiple targets. 🚀 Features ⚡ High-performance Rust implementation 🧵 Multi-threaded scanning engine ⏱ Adjustable timeout & retry system ...

ysoserial-cve-2018-2628

ysoserial-cve-2018-2628 0x1. Preparation Prepare the software environment required for POC script, Payload Object generation, and JRMPListener execution Python 2.7.x Oracle Java SE 1.7+ Prepare a WebLogic Server 10.3.6 environment with Patch Set Update 180417 installed AdminServer only is...

CVE-2025-59528-PoC

CVE-2025-59528 PoC Proof of Concept for researching CVE-2025-59528 in an isolated laboratory environment. !WARNING DISCLAIMER This project is intended strictly for educational purposes, security research, and testing systems that you own or have explicit authorization to test. Do not use this PoC...

CVE-2026-7777-Rust-Use-After-Free-in-Unsafe-Web-Server

CVE-2026-7777 – Rust Use‑After‑Free in Unsafe Web Server Program Code Rust // uafserver.rs - Vulnerable Rust HTTP server with use-after-free use std::sync::Arc, Mutex; use std::thread; use std::io::prelude::; use std::net::TcpListener, TcpStream; struct SharedBuffer data: Vec, impl SharedBuffer f...

CVE-2024-50379

Manual exploitation is troublesome, so I whipped up an exp.. Usage: shell.jsp is the shell file, ggsl.jsp is the name/path saved to the target server. ./CVE-2024-50379 -u http://192.168.2.245:8080 -f shell.jsp -p ggsl.jsp Disclaimer This tool is only intended for legally authorized enterprise...